Recent Advisories

Severity ID Title Vendor Product Date Type
NONE MSSECURE:51720D...

​​Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report_MSSECURE:51720D71A6AB104D61508E67146C5E26

We are excited to share that **Microsoft has been named a Leader in****The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026**. M...

N/A N/A MSSECURE
CRITICAL 9.1 CVE-2026-36418

CVE-2026-36418_CVE-2026-36418

JimuReport versions 2.3.4 and below are vulnerable to remote code execution due to improper handling of Aviator expressions. The /jmreport/executeS...

n/a n/a n/a CVE
HIGH 8.4 CVE-2025-26240

CVE-2025-26240_CVE-2025-26240

In JazzCore python-pdfkit 1.0.0, the from_string method enables the execution of JavaScript code within the context of the server application and t...

n/a n/a n/a CVE
HIGH 7.4 CVE-2026-9697

undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent_CVE-2026-9697

Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://). The target HTTPS ...

undici undici 7.23.0 CVE
MEDIUM 5.9 CVE-2026-9679

undici vulnerable to HTTP header injection via Set-Cookie percent-decoding_CVE-2026-9679

Impact: undici's cookie parser in parseSetCookie percent-decodes cookie values via qsUnescape, turning encoded sequences like %0D%0A, %00, %3B, and...

undici undici CVE
MEDIUM 5.9 CVE-2026-9678

undici vulnerable to cross-user information disclosure via shared cache whitespace bypass_CVE-2026-9678

Impact: Undici's cache interceptor incorrectly classifies some responses as cacheable when the upstream Cache-Control header uses whitespace-padded...

undici undici 7.0.0 CVE
HIGH 8.8 CVE-2026-7300

Buffer Copy without Checking Size of Input (‘Classic Buffer Overflow’) vulnerability in RTI Connext Professional (Web Integration Service) allows Filter Failure through Buffer Overflow._CVE-2026-7300

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in RTI Connext Professional (Web Integration Service) allows F...

RTI Connext Professional 7.4.0 CVE
HIGH 7.5 CVE-2026-6734

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse_CVE-2026-6734

Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin match...

undici undici 7.23.0 CVE
LOW 3.7 CVE-2026-6733

undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse_CVE-2026-6733

Impact: Undici's HTTP/1.1 client is vulnerable to response queue poisoning on reused keep-alive sockets. An attacker-controlled upstream server can...

undici undici CVE
CRITICAL 9.3 CVE-2026-53805

NVIDIA SIL GEN3C Unauthenticated RCE via Pickle Deserialization in Inference API_CVE-2026-53805

NVIDIA Spatial Intelligence Lab's (SIL) GEN3C contains an unauthenticated remote code execution vulnerability in the inference API server where the...

nv-tlabs GEN3C CVE